Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BE8D2BA425B311F0A3CF4CB6DAE4EC9C.roa
File: BE8D2BA425B311F0A3CF4CB6DAE4EC9C.roa (raw, json)
Hash identifier: IDLuMRH85xlFvsDVjpY6jvuP3Q6m+EmWLJMSH2zrPLo=
Subject key identifier: 80:A6:C7:DB:B7:C3:92:B7:5F:47:04:8B:53:D3:E5:5B:1D:CB:18:B0
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 098F
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BE8D2BA425B311F0A3CF4CB6DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 11:10:38 +0000
ROA not before: Wed 30 Apr 2025 11:10:33 +0000
ROA not after: Tue 13 Jan 2026 11:10:33 +0000
asID: 43260
IP address blocks: 102.135.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2447 (0x98f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Apr 30 11:10:33 2025 GMT
Not After : Jan 13 11:10:33 2026 GMT
Subject: CN=6812052e-859b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:52:2b:64:17:dc:d2:cd:af:cb:2d:49:40:26:
e1:98:de:66:7d:dd:81:59:b0:c8:b4:b4:6c:30:1e:
e2:ad:dc:d5:2a:60:0c:a7:f5:31:5b:98:48:00:a9:
68:e9:d3:49:54:c6:de:7b:9a:93:84:94:f1:a2:c0:
f2:cc:51:bb:dd:7c:2c:7a:9d:3a:93:e4:36:c2:79:
6d:e5:6e:a3:c6:cd:a7:3c:66:44:9c:16:4b:04:eb:
ba:dd:1a:a7:cf:18:37:8f:ef:80:3b:72:38:d7:68:
58:b0:48:88:a1:ff:2a:34:f9:a2:10:83:98:3b:4d:
b0:e2:f8:56:e3:98:80:88:06:5b:ec:a6:f7:ce:ff:
99:0d:af:3e:6f:22:67:70:c5:3a:94:b8:d6:af:b7:
dc:bd:63:ac:89:f4:a6:cd:a3:23:2e:3c:57:7c:99:
22:0d:49:d7:2c:4e:e8:34:1c:2f:81:3c:d7:93:43:
d8:c4:5d:79:19:cf:1c:f2:26:49:15:13:e9:fd:49:
04:ff:83:57:5e:5f:c5:a6:6a:dd:53:2e:cc:c2:5a:
87:e2:c5:5f:03:e0:df:0c:9d:8a:45:72:5e:e8:45:
eb:ce:61:9d:8d:c3:b5:e2:79:4f:c6:4a:4f:b7:68:
4c:20:f1:cb:d9:39:01:72:13:db:01:46:53:1c:d0:
e1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A6:C7:DB:B7:C3:92:B7:5F:47:04:8B:53:D3:E5:5B:1D:CB:18:B0
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BE8D2BA425B311F0A3CF4CB6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.9.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:6e:46:51:1b:84:0a:05:9e:1d:82:42:67:5e:6a:dc:d6:f8:
18:a0:f4:eb:30:ac:af:86:c1:66:e6:95:d6:36:d2:5d:ac:fd:
ed:62:9b:0d:65:95:63:f5:5b:df:13:d1:52:71:af:bc:51:c4:
62:66:c7:90:6e:ee:62:79:f4:d9:57:66:eb:35:7f:09:d9:cb:
e8:bc:d4:b3:d7:a0:3a:6b:98:a2:03:88:e6:a9:8b:c9:c2:0f:
65:1c:c1:3e:89:da:8f:ec:a1:5e:dc:e7:a5:da:f3:77:ea:cd:
98:42:ad:cc:3e:10:c4:d1:2c:48:e0:c4:5b:7f:a4:04:9f:6c:
17:fc:b5:aa:ea:06:f0:f5:7b:04:85:91:12:83:f2:17:ac:68:
a2:1f:74:17:28:1a:28:e4:ec:57:3a:f6:b7:e2:e5:b2:02:b8:
e3:67:8b:18:f3:c7:bf:e6:40:c8:dd:49:1e:ab:2f:02:84:2e:
6b:e0:a2:fc:41:a8:7c:29:3e:ef:5d:e1:e2:b6:a3:24:13:1b:
fa:a0:87:85:ea:a3:23:fe:f4:70:71:5e:8a:54:c8:83:f2:00:
75:01:33:ed:c1:86:18:e2:58:6d:00:53:d2:a8:c2:8c:71:a8:
e1:bf:f6:ce:dc:52:d0:37:24:84:8f:ef:27:d5:df:c9:61:2f:
2f:f2:e6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:33:52 2025 by rpki-client